Microsoft and Crowdstrike Collaborate on Threat Actor Naming

Jul 18, 2025 · 5:27 · Watch on YouTube ↗

Summary

Microsoft announced a strategic collaboration with Crowdstrike to clarify threat actor naming. The hosts discuss potential benefits for tracking and coordination, along with practical concerns about maintaining a shared system.

Key points

Microsoft announced a strategic collaboration with Crowdstrike focused on clarifying threat actor naming.
The hosts argue that different names for the same threat actor can hinder communication, tracking and coordinated responses.
They discuss challenges including maintaining a shared naming system and companies' investment in their existing names.
One host suggests Google, Mandiant and Palo Alto may join; this is presented as an expectation, not a confirmed development.
As an example of naming complexity, a host says Scattered Spider is known by 73 other names across different companies.

Article Details

Topics: [00:33] Microsoft and Crowdstrike's collaboration on threat actor naming
[01:06] Potential benefits of standardizing threat actor names
[02:16] Possible participation by other security companies
[02:42] Challenges of maintaining a shared naming system
[03:17] Potential effects on threat tracking and coordinated response

People

Dave BalesHost who discusses concerns about maintaining a shared threat actor naming system and ultimately supports the initiative.Nick BradleyHost who argues that standardizing threat actor names could improve clarity and coordination.

Vendors

CrowdStrike[00:37] strategic collaboration with Crowdstrike Microsoft[00:33] Good. Microsoft has just announced a new